$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/kXZCk9yVb-TbgBhz-FVSlmBWtec.roa File: kXZCk9yVb-TbgBhz-FVSlmBWtec.roa (raw, json) Hash identifier: WCqrt/kBPmgIVyE1hTKibo/RfpGcZAWcSddDf6vwCws= Subject key identifier: 91:76:42:93:DC:95:6F:E4:DB:80:18:73:F8:55:52:96:60:56:B5:E7 Certificate issuer: /CN=2C20881A0EFD0664A591AF3095D29935EF9BC361 Certificate serial: 036C Authority key identifier: 2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/kXZCk9yVb-TbgBhz-FVSlmBWtec.roa Signing time: Mon 10 Feb 2025 14:00:25 +0000 ROA not before: Mon 10 Feb 2025 14:00:25 +0000 ROA not after: Thu 28 Aug 2025 15:30:19 +0000 asID: 31898 IP address blocks: 2401:bf60:4ff8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 876 (0x36c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C20881A0EFD0664A591AF3095D29935EF9BC361 Validity Not Before: Feb 10 14:00:25 2025 GMT Not After : Aug 28 15:30:19 2025 GMT Subject: CN=91764293DC956FE4DB801873F85552966056B5E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:91:c8:22:cd:13:d1:b9:6c:d3:d9:e7:d6: c9:4e:e9:6c:77:d2:b4:01:ed:be:20:bd:f4:c6:e3: 1d:85:11:35:19:8c:a3:f7:38:33:7d:11:5d:ca:1d: 32:07:5f:1d:03:e2:cf:c8:e6:15:a6:dc:e3:08:7c: 45:12:85:7a:35:e3:ae:d2:c5:1e:67:61:eb:69:54: ed:e9:89:fb:37:67:bc:ec:dd:1e:30:9f:7a:4f:59: 0d:5b:17:78:39:1e:f2:ea:66:75:ad:46:8d:dd:da: 2e:0c:fe:bd:89:fb:57:96:f8:74:b6:cf:ea:0d:17: 9d:3e:45:69:2a:4b:eb:8d:c1:e2:d3:bd:77:0b:b3: c3:ed:a2:24:88:da:75:67:27:c3:56:3f:78:ee:dd: 97:63:7b:1e:89:0f:3d:28:96:7f:1a:4d:34:f9:38: 85:57:07:c7:61:dd:8b:06:ba:d3:96:74:5c:75:85: 7c:24:23:aa:e9:82:9e:1e:95:62:f5:d6:c2:03:6e: 2d:39:74:09:cf:ad:a6:a3:3b:94:59:e1:c1:08:1d: 2c:00:a7:43:5a:36:f6:19:2a:46:66:68:8c:c7:db: a8:65:82:d0:de:77:43:47:23:bb:5b:30:b8:14:fd: fd:ac:f5:28:13:38:9a:92:e1:c1:2b:88:b5:f8:f2: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:76:42:93:DC:95:6F:E4:DB:80:18:73:F8:55:52:96:60:56:B5:E7 X509v3 Authority Key Identifier: keyid:2C:20:88:1A:0E:FD:06:64:A5:91:AF:30:95:D2:99:35:EF:9B:C3:61 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/LCCIGg79BmSlka8wldKZNe-bw2E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LCCIGg79BmSlka8wldKZNe-bw2E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CODEUPTECH/kXZCk9yVb-TbgBhz-FVSlmBWtec.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv6: 2401:bf60:4ff8::/48 Signature Algorithm: sha256WithRSAEncryption 78:f1:f2:c4:52:17:29:89:31:65:7f:d1:1d:2e:ad:36:57:32: 11:b4:d2:14:a8:ea:54:9f:d9:6c:78:23:11:b8:8d:75:62:e4: e7:1e:f5:3b:f9:37:2b:97:7f:a4:22:f2:7b:42:d1:97:e6:96: 91:10:19:42:9a:48:6e:93:1e:8e:cf:4f:79:ac:d5:97:78:2a: 18:10:35:2d:cb:8f:57:0b:0e:e6:23:48:43:d7:a9:32:55:02: 9e:eb:21:81:4a:98:89:13:4f:af:cf:2d:1d:aa:9d:e3:38:e2: e0:b0:61:9e:d5:8a:a7:38:b8:a5:de:83:1c:58:f7:e3:08:a7: 54:04:74:d7:d9:86:b0:e3:07:3e:d2:cc:c0:a7:e9:bf:30:84: b7:92:6d:f0:41:d8:a7:8e:55:b2:2c:e9:93:33:b7:cf:b1:73: 88:1e:bc:d1:7b:ec:a8:02:64:81:27:60:8b:c0:03:35:99:b5: f1:e1:92:bb:13:9f:7d:0d:58:62:82:8d:ee:b9:93:5a:c2:38: 98:b1:a7:29:d1:4b:0a:9a:bb:8a:6b:e6:07:70:a2:7c:8b:94: cd:fe:55:8a:fe:ef:3a:c5:f6:52:f1:0f:f2:70:8e:ad:32:30: 5f:f3:f8:62:38:af:a1:4a:69:99:99:40:ba:6a:c6:f0:63:73: 52:b0:a3:3c -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMy MDg4MUEwRUZEMDY2NEE1OTFBRjMwOTVEMjk5MzVFRjlCQzM2MTAeFw0yNTAyMTAx NDAwMjVaFw0yNTA4MjgxNTMwMTlaMDMxMTAvBgNVBAMTKDkxNzY0MjkzREM5NTZG RTREQjgwMTg3M0Y4NTU1Mjk2NjA1NkI1RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9e5HIIs0T0bls09nn1slO6Wx30rQB7b4gvfTG4x2FETUZjKP3 ODN9EV3KHTIHXx0D4s/I5hWm3OMIfEUShXo1467SxR5nYetpVO3pifs3Z7zs3R4w n3pPWQ1bF3g5HvLqZnWtRo3d2i4M/r2J+1eW+HS2z+oNF50+RWkqS+uNweLTvXcL s8PtoiSI2nVnJ8NWP3ju3Zdjex6JDz0oln8aTTT5OIVXB8dh3YsGutOWdFx1hXwk I6rpgp4elWL11sIDbi05dAnPraajO5RZ4cEIHSwAp0NaNvYZKkZmaIzH26hlgtDe d0NHI7tbMLgU/f2s9SgTOJqS4cEriLX48s3xAgMBAAGjggH5MIIB9TAdBgNVHQ4E FgQUkXZCk9yVb+TbgBhz+FVSlmBWtecwHwYDVR0jBBgwFoAULCCIGg79BmSlka8w ldKZNe+bw2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ09ERVVQ VEVDSC9MQ0NJR2c3OUJtU2xrYTh3bGRLWk5lLWJ3MkUuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL0xDQ0lHZzc5Qm1TbGthOHdsZEtaTmUtYncyRS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NPREVVUFRFQ0gva1haQ2s5eVZi LVRiZ0Joei1GVlNsbUJXdGVjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQBv2BP+DANBgkqhkiG9w0BAQsFAAOCAQEAePHyxFIXKYkxZX/RHS6t NlcyEbTSFKjqVJ/ZbHgjEbiNdWLk5x71O/k3K5d/pCLye0LRl+aWkRAZQppIbpMe js9PeazVl3gqGBA1LcuPVwsO5iNIQ9epMlUCnushgUqYiRNPr88tHaqd4zji4LBh ntWKpzi4pd6DHFj34winVAR019mGsOMHPtLMwKfpvzCEt5Jt8EHYp45VsizpkzO3 z7FziB680XvsqAJkgSdgi8ADNZm18eGSuxOffQ1YYoKN7rmTWsI4mLGnKdFLCpq7 imvmB3CifIuUzf5Viv7vOsX2UvEP8nCOrTIwX/P4YjivoUppmZlAumrG8GNzUrCj PA== -----END CERTIFICATE-----Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net